Head of IT Governance and Security

Job Description

This is a broad technology leadership role, but not a traditional Head of IT job.

The main focus is data governance and responsible AI — helping a growing technology group make better use of its data and move quickly with AI, while putting the right standards and guardrails around it.

There’s plenty happening.

The business has a modern data and MarTech environment across Snowflake, Tableau, Tealium and Braze, with a significant customer data set and more AI use cases emerging across different parts of the group. They’re also exploring some genuinely interesting ways of using their own data with AI.
Your job is to help govern that properly without turning it into a bureaucracy.

You’ll take the lead on how data is managed, accessed, trusted and used across analytics and AI, while building the broader responsible-AI framework around what the business is already doing.

ISO 42001 is on the roadmap, and you’ll play a key role in getting the organisation ready for certification. You don’t need to have implemented ISO 42001 before, but you should have some exposure to AI already and be interested in how businesses can adopt it quickly and responsibly.

There is also a cyber, risk and compliance remit, but this isn’t a cyber-first hire. The existing security and compliance program is mature, including ISO 27001, Essential Eight and SOC 2, with operational support internally and through external providers.

You’ll sit alongside the CTO, with an IT/Ops Manager and operational function reporting into you. They handle the day-to-day technology environment, leaving you to focus more broadly on governance, standards, vendors, data, AI and how the group uses technology.

A bit about you....

You’ve probably worked in a smaller technology, SaaS or platform business where job descriptions aren't particularly neat and you've had to cover a few different areas.

You may currently be a Head of Technology, Head of IT or in a broader technology/cyber operations leadership role.

Ideally, you started with a solid technical foundation and have since moved into broader leadership across areas such as IT and data governance, security, risk, compliance and AI.

You don't need to be the deepest technical person in the room today, but you need to understand the technology well enough to challenge people, make good decisions and set sensible standards.

Just as importantly, this won't suit someone who wants to run governance purely through process.

The culture is energetic and entrepreneurial. They want someone visible, curious and commercially minded — an operator who can create enough structure to manage risk while still helping people move faster.

You’ll become one of the key internal voices around how the business uses data and AI responsibly, with plenty of scope to shape the role as the group continues to grow.

Russell@theonset.com.au / 0438984265